CISA Known Exploited Vulnerabilities (KEV)
自動配備
Filigranの提供による
Vulnerability & Exploit Awareness
概要
Imports vulnerabilities actively exploited in the wild from the CISA Known Exploited Vulnerabilities (KEV) catalog into OpenCTI as STIX Vulnerability objects.
CISA KEV (Known Exploited Vulnerabilities) is a catalog maintained by the Cybersecurity and Infrastructure Security Agency that lists vulnerabilities actively exploited in the wild. It serves as an authoritative resource for organizations to prioritize vulnerability remediation and enhance their security resilience.
The integration of the CISA KEV source with OpenCTI enables the ingestion of vulnerabilities known to be actively exploited. This process involves parsing out Identity, Infrastructure, and Vulnerability STIX Objects, which are then imported into OpenCTI.